Privacy Policy — Swamp Fox Cyber Defense

01 — Overview

The Short Version

      Plain English Summary: Swamp Fox Cyber Defense does not sell your data, does not build advertising profiles, and does not retain the content you submit to our free tools. When you use our AI-powered tools, your input is processed by Google Gemini in real time and discarded — we never see it or store it. Our tools are free, educational resources for small businesses.
    

Swamp Fox Cyber Defense ("we," "us," "our") is a cybersecurity consulting firm based in Chambersburg, Pennsylvania, operated by Andrew Wellman, CISSP/SecurityX/GIAC GRID. We provide free cybersecurity tools and educational resources primarily for small businesses in Franklin County, PA and the surrounding region.

This Privacy Policy explains what information is collected when you visit our websites or use our tools, how it is used, and your rights. If you have questions, contact us at andrew@swampfoxcyber.org.

02 — Data Collection

What We Collect

The table below summarizes information that may be collected when you use our sites and tools.

Data Type	How Collected	Retained by Us?
Email you submit to BEC Checker	You paste it into the tool	Not Retained
IoT device selections (Inventory Tool)	Checkbox selections in browser	Not Retained
IP address & request metadata	Cloudflare Pages (automatic)	Cloudflare — see their policy
Basic analytics (page views, referrers)	Cloudflare Web Analytics (if enabled)	Cloudflare — no cookies, no personal data
Contact form submissions	Squarespace contact form	Squarespace — see their policy
Appointment bookings	Squarespace scheduling	Yes — name, email, phone for scheduling

We do not use cookies for tracking, do not run advertising networks, and do not share or sell any personal information to third parties for marketing purposes.

If you book a free assessment, we collect your name, email address, and phone number for the sole purpose of scheduling and conducting that appointment. This information is held in Squarespace Scheduling and is never sold or shared.

03 — AI-Powered Tools

How Our AI Tools Handle Your Data

Several of our free tools use artificial intelligence to analyze your input and generate recommendations. It is important that you understand exactly how these work:

Important: When you use our AI tools, your input (email text, device list, etc.) is transmitted directly from your browser to Google's Gemini API. Swamp Fox Cyber Defense does not receive, log, or store this content. However, Google may process and retain data according to its own AI privacy policies. We strongly recommend reviewing Google's Gemini API Terms and Google's Privacy Policy.

📧 BEC Email Checker

Email text you paste is sent to Google Gemini for analysis in real time. Swamp Fox Cyber Defense does not store or log email content. Do not submit emails containing passwords, SSNs, or financial account numbers. Google Gemini Terms ↗

📊 IoT Inventory & AI Plan

Your device selections are sent to Google Gemini to generate a custom action plan. No device names or personal information are stored by us. The action plan is generated in real time and not retained.

We recommend you do not submit personally identifiable information, financial data, passwords, or sensitive business records into any AI-powered tool on this site. These tools are designed for cybersecurity awareness and education, not for processing sensitive data.

04 — Third-Party Services

Third-Party Services We Use

Our tools and website integrate with the following third-party services. Each has its own privacy policy which governs how they handle data.

Service	Purpose	Privacy Policy
Cloudflare Pages & Workers	Website hosting and AI proxy	cloudflare.com/privacypolicy ↗
Google Gemini API	AI analysis in BEC Checker and IoT Tool	ai.google.dev/gemini-api/terms ↗
Google Fonts	Typography (Playfair Display, Source Sans 3)	policies.google.com/privacy ↗
Squarespace	Main website, contact forms, appointment scheduling	squarespace.com/privacy ↗
NIST NVD API	Live CVE data in CVE Tracker and IoT tools	nist.gov/privacy-policy ↗
CISA (cisagov GitHub)	Known Exploited Vulnerabilities (KEV) feed	cisa.gov/privacy-policy ↗

We do not use Google Analytics, Meta Pixel, or any advertising or behavioral tracking technologies on this site.

05 — Your Rights

Your Rights & Pennsylvania Law

Pennsylvania residents have rights under the Pennsylvania Breach of Personal Information Notification Act (73 P.S. § 2301) regarding how their personal information is handled. Because we collect minimal personal data, most of these rights have limited applicability to our services, but we are committed to honoring them.

You have the right to:

Access. Request a copy of any personal information we hold about you (limited to appointment booking data).

Deletion. Request deletion of your appointment booking information at any time by emailing us.

Correction. Request correction of any inaccurate information we hold.

Breach Notification. In the unlikely event of a data breach involving your personal information, we will notify you as required by Pennsylvania law.

To exercise any of these rights, contact Andrew Wellman at andrew@swampfoxcyber.org.

06 — Updates

Changes to This Policy

We may update this Privacy Policy as our tools or services change. The "Last Updated" date at the top of this page will reflect any revisions. Material changes will be noted on this page. Continued use of our tools after changes constitutes acceptance of the updated policy.

This policy does not apply to third-party websites linked from our tools or site, including CISA, NIST, FBI IC3, or other government resources.

07 — Contact

Questions & Contact

If you have questions about this Privacy Policy, how your data is handled, or wish to exercise your rights, please contact:

Andrew Wellman, CISSP · SecurityX · GIAC GRID

Swamp Fox Cyber Defense
Chambersburg, Pennsylvania
andrew@swampfoxcyber.org
swampfoxcyber.org/appointments